CVE-2026-91003: D-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflow
A flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzglasp of the file /rzgl.asp of the component CGI Service. This manipulation of the argument redircturl causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The published severity vector indicates that an attacker needs high privileges (PR:H). Exploitation is remote, requires no user interaction, and has low attack complexity.
Which deployments are known to be affected?
The affected product and version identified in the available data are D-Link DI-8300 16.07. The vulnerable CGI endpoint is /rzgl.asp, specifically its rzgl_asp function handling the redirct_url argument.
Is exploit code available?
Yes. The available data states that an exploit has been published and may be used.
What is the potential impact of successful exploitation?
Successful exploitation can cause a stack-based buffer overflow. The supplied severity vector rates confidentiality, integrity, and availability impacts as high, with scope changed.